search for: mandetori

Hello Samba team ! On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) : -> One PDC : pdc01 -> Two "slave" DC : sdc02, sdc03 I don't know why, but sometimes Samba receive the SIGTERM signal and restart even if I remove it from the logrotate configuration. On "pdc01" I see : ---------- pdc01 (log.samba) ---------- SIGTERM: killing children

On Fri, 21 Apr 2017 12:00:59 -0400 Eleuterio Contracampo via samba <samba at lists.samba.org> wrote: > [2017/04/21 12:47:55.219297, 0] > ../auth/gensec/gensec.c:257(gensec_verify_dcerpc_auth_level) > > Did not manage to negotiate mandetory feature SIGN for dcerpc > auth_level 6 > I think you may be running into an artefact of the badlock patches, for which Win7 will

>> >> Hello Samba team ! >> >> On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) >> : >> -> One PDC : pdc01 >> -> Two "slave" DC : sdc02, sdc03 >> >> I don't know why, but sometimes Samba receive the SIGTERM signal and >> restart even if I remove it from the logrotate configuration. On >>

Today I had another automatic restart of my secondary DC because samba-tool drs showrepl showed errors. The restart was completed at 12:35. This is what I found in log.samba at log level 3: [2016/01/04 12:33:47.201892, 3] ../source4/rpc_server/drsuapi/getncchanges.c:2007(dcesrv_drsuapi_DsGetNCChanges) UpdateRefs on getncchanges for b19509be-c3ee-4a58-9fc9-afd61759a23f [2016/01/04

Sorry, I missed some relevant part of the logs after the suggested changes: Kerberos: AS-REQ user2 at MYDOMAIN from ipv4:192.168.44.56:2080 for krbtgt/MYDOMAIN at MYDOMAIN [2017/04/21 12:47:37.526742, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client sent patypes: encrypted-timestamp, 128 [2017/04/21 12:47:37.526772, 3]

Thank you Rowland!! Sorry about my ignorance. I guess I tried many different things and polluted the smb.conf file. I've removed every single line you mentioned off my smb.conf. Still the problem persists: MYDOMAIN\Administrator (S-1-5-21-1965676298-842383976-2353361141-500) is changing password of user2 at MYDOMAIN.org.ar [2017/04/21 12:05:42.233899, 3]

Just a follow-up. Still, no resolution. I've tried different combinations with "client ipc signing" without luck. A traffic dump shows the problem as: i) windows XP client sends a DCE/RPC SAMR command GetDomPwInfo ii) samba DC responds with DCE/RPC Fault nca_proto_error I've also tried fiddling with Local Security Policy registry values at the Win XP machine, but got nothing

2016-04-01 23:36 GMT+02:00 Rowland penny <rpenny at samba.org>: > On 30/03/16 13:35, Prunk Dump wrote: >> >> Hello Samba team ! >> >> On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) >> : >> -> One PDC : pdc01 >> -> Two "slave" DC : sdc02, sdc03 >> >> I don't know why, but sometimes Samba

I'd check for differences in the ldap trees with samba-tool ldapcmp first If such are found try an manual full sync replication to fix the difference. I had an similar issue a while back and an deleted object on one dc caused such sigterm's. Had to get that deleted object out of the way afterwards the dc's where stable again. Am 30.03.2016 um 14:35 schrieb Prunk Dump: > Hello

On 30/03/16 13:35, Prunk Dump wrote: > Hello Samba team ! > > On my network I have three Samba-4.1.17 domain controllers (Debian Jessie) : > -> One PDC : pdc01 > -> Two "slave" DC : sdc02, sdc03 > > I don't know why, but sometimes Samba receive the SIGTERM signal and > restart even if I remove it from the logrotate configuration. On >

Hi Team, I have configured server signing as mandatory in smb.conf. After configured, guest user is not working when AD is connected. In mac while connecting to samba if i give register user as vignesh/guest, guest user is working. But if I click Guest radio button, guest user is not working. Please find the below configuration and log for reference. [Global] available= yes restrict anonymous=

Hi, I'm resending this to the list since I cannot see it on the archive, for some reason... I recently upgraded two (running stable) systems from Debian Wheezy to Jessie. Samba version has not changed since on Wheezy I was using the one from wheezy-backports (v4.1.17), same as on jessie. These are 2 basic DCs without any additional config. Since the upgrade, every day at either at 10 PM or 8

Hello everyone, First time with Samba 4. I've got it running mostly (with Windows 7 clients, everything works like a charm.), but I-m struggling with an issue that is driving me nuts (spent countless hours trying out stuff and googleing without luck): When users log in from Win XP Pro terminals, and are forced to change initially assigned passwords, they get an error (1728: error in RCP

Thank you once again! I'll research that link, and let everyone interested know about the results. EC On Fri, Apr 21, 2017 at 12:50 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 21 Apr 2017 12:00:59 -0400 > Eleuterio Contracampo via samba <samba at lists.samba.org> wrote: > > > [2017/04/21 12:47:55.219297, 0] > >

I think the "client ip signing options" don't matter on the domain controller, since the domain controller is not functioning as a server. (If this was a samba member server, then it would matter.) You MAY want to try server signing = no On 04/25/17 12:14, Eleuterio Contracampo via samba wrote: > Just a follow-up. Still, no resolution. I've tried different

You did change : the DLZ option from 9.8 to 9.9 ? check your bind options. this .. dlz "AD DNS Zone" { # For BIND 9.8.x # database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9.so"; # For BIND 9.9.x database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so"; # For BIND 9.10.x # database "dlopen

I would like to setup a samba PDC with mandatory profiles for my school. I know that I can easily use them for XP (centralized) and that for Win 98 I have to put them in the user accounts. Now my question: do I have to put a profile in the user account each time a new user is made? Or is there a simple way of doing this. (off course I would link it to one profile, but this way I still have to

Hi Andrew, If I give register user as vignesh/guest, its working fine. While selecting the Guest radio button, guest user is not working. Guest user is working fine without AD connection. Kindly do the needful. Thanks, Vignesh. On Wed, Sep 25, 2019 at 4:28 PM Andrew Bartlett <abartlet at samba.org> wrote: > On Wed, 2019-09-25 at 16:24 +0530, VigneshDhanraj G via samba wrote: > >